closes #312 Allow access to EKS cluster from MWAA security group (#399)

awslabs · Jan 23, 2024 · 2a602c9 · 2a602c9
1 parent 3906c65
commit 2a602c9
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/schedulers/terraform/managed-airflow-mwaa/eks.tf b/schedulers/terraform/managed-airflow-mwaa/eks.tf
@@ -40,13 +40,14 @@ module "eks" {
       source_node_security_group = true
     }
 
+    # MWAA needs access to the EKS control plane in order to submit a job
     allow_access_from_mwaa = {
-      description = "Nodes on ephemeral ports"
+      description = "Access from MWAA"
       protocol    = "tcp"
-      from_port   = 1025
-      to_port     = 65535
+      from_port   = 443
+      to_port     = 443
       type        = "ingress"
-      cidr_blocks = [local.vpc_cidr]
+      source_security_group_id = module.mwaa.mwaa_security_group_id
     }
   }